Trust Center

Security Compliance at TRM

TRM maintains a first-in-class security program and has completed and passed its SOC 2 Type II audit, and will continue to build out its security infrastructure using the ISO 27001 framework, in accordance with GDPR principles. Our SOC 2 Type II audit report is available on request through your account executive.

TRM data is stored in redundant geographically dispersed data centers. Our data centers are SOC 2 Type II, ISO 27001 certified and managed under a TRM vendor management program.

In addition to our extensive internal scanning and testing program, each year, TRM employs third-party security experts to perform a broad penetration test across the TRM Production and Corporate Networks. Executive summaries of test results may be requested from your account team.

As part of the third-party vendor management process, management periodically reviews the performance of vendor entities by verifying that they maintain their relevant certifications (e.g., SOC 1, SOC 2, ISO 27001:2013, PCI- DSS, and E.U.-U.S. and Swiss-U.S. Privacy Shield, etc.) by reviewing security and privacy control documentation captured in SOC 1 reports, SOC 2 reports, or other system and organizational documents, to validate the design and operating effectiveness of vendor controls.